This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
File:                     aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json)
Hash identifier:          buBSWHGajG+F2uxFluq5W66/D4yOQa6sh306gbGHwOI=
Subject key identifier:   A4:AF:CE:F3:41:8A:6D:A5:4C:4C:C9:5E:71:96:BD:44:17:6F:EB:7D
Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
Certificate issuer:       /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
Manifest number:          019A
Signing time:             Sun 25 Jan 2026 02:44:21 +0000
Manifest this update:     Sun 25 Jan 2026 02:44:21 +0000
Manifest next update:     Sun 01 Feb 2026 02:44:21 +0000
Files and hashes:         1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: Rw/FIQiU/cVc7rNUXA8X0xoDb2cX+V48Zi61Ua5lKyc=)
                          2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: 7nbk648Lx+0TS3n2r2a85obb4RAoKVLjKlJc+cMH7wA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
        Validity
            Not Before: Jan 25 02:44:21 2026 GMT
            Not After : Feb  1 02:44:21 2026 GMT
        Subject: CN=69758385-6659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:77:72:db:e4:26:e5:23:87:6c:8c:0a:38:
                    58:64:80:41:be:ef:63:39:e4:91:93:f7:f0:b9:b8:
                    bf:71:a7:93:78:99:5d:ad:f7:7c:69:24:6e:a7:9b:
                    e4:a5:85:69:43:05:50:a8:87:ad:92:81:74:6f:71:
                    58:6e:7c:20:1e:2f:82:af:6a:89:c9:f1:27:7e:77:
                    53:2b:37:88:5c:6b:e2:d6:2a:e3:47:8c:40:99:dc:
                    ec:81:33:6e:1f:0f:f1:4f:73:81:ab:f3:92:79:c2:
                    a4:3a:cf:ef:06:0b:86:e1:90:9e:a7:8f:08:8f:32:
                    64:4c:b3:31:70:0c:d6:e8:e4:73:36:c8:d9:69:71:
                    dc:93:78:45:97:1e:2f:c9:c8:e4:41:58:3e:a1:08:
                    6f:8f:ea:82:89:45:2c:b9:06:7a:2b:70:16:29:f6:
                    da:e1:a1:fa:0c:bb:09:9c:f9:cd:27:79:b7:1e:eb:
                    a2:31:bf:2c:af:a9:de:bb:fc:7d:85:09:1b:c1:0b:
                    51:2a:b5:c2:59:f7:2b:fb:96:68:5b:b8:67:fe:bd:
                    a1:4e:df:ef:b7:d0:4c:d9:3d:ea:17:cd:0c:0d:26:
                    a0:48:f3:f3:f3:c5:27:69:a8:c5:d3:9c:8c:4a:89:
                    1f:54:af:3b:13:44:6b:97:e2:fe:59:ae:8e:fd:61:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:CE:F3:41:8A:6D:A5:4C:4C:C9:5E:71:96:BD:44:17:6F:EB:7D
            X509v3 Authority Key Identifier:
                keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:39:72:3d:b6:92:be:e8:88:57:2b:8a:82:b5:2a:da:91:f4:
         79:92:ff:f9:26:36:d7:0f:8e:58:54:4f:5f:6e:28:af:89:7c:
         1b:ae:38:be:b5:34:1a:cc:a5:ee:e5:93:25:29:d2:59:99:00:
         f3:ad:64:5b:5e:82:3e:7d:18:10:4b:ae:1f:c1:0d:36:0d:ff:
         6a:69:5d:fb:b0:73:04:c5:5e:ac:11:33:18:3f:6b:a5:27:06:
         d2:e5:1f:e9:c6:0b:57:25:af:38:5c:66:07:4a:a1:89:75:76:
         2b:8d:01:cf:a5:81:70:1b:cd:47:4d:19:04:39:b8:7e:50:49:
         5d:26:e0:b0:39:8a:52:11:e7:a4:79:14:32:60:36:09:e8:8d:
         6f:db:2e:2d:c9:98:91:c7:28:d1:a7:b3:53:3d:e7:b3:79:d6:
         60:69:1f:e6:ed:a6:3b:0e:ba:20:4d:39:24:3f:ab:f4:0c:5c:
         96:d9:a1:0a:06:8d:ca:d7:f7:27:ef:ae:6a:63:92:a9:8b:b0:
         f3:39:97:d4:ac:ea:27:34:3e:c5:78:c5:4b:7a:88:00:55:d6:
         3f:68:88:12:ba:2b:04:11:17:c6:49:f6:b3:eb:ca:93:b8:bd:
         4f:38:49:8b:c3:a0:3b:a5:58:a5:65:8d:60:b5:7a:b4:a9:8e:
         5b:92:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:06:54 2026 by rpki-client